Signing metadata

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2017-06-21 20:24]:
> Yes, that's what would have to be done, but that doesn't help with,
> say, changing endpoints.

Right. But making key rollover easier (and that way is supposed to be
easier than following the purposefully disconnected steps documented
e.g. in the shib wiki) would still be win, no?

> My reluctance is mostly around the fact that the people who want it
> almost universally intend to just blow off security anyway, which
> they should be able to do with no help from us.

ACK :)

-peter